GDPR Compliance

Last updated: August 19, 2026

Data Controller Information

For the purposes of UK GDPR, the data controller is quiet-bear, located at 47 Albion Street, Hanley, Stoke-on-Trent, ST1 5EP, United Kingdom.

Legal Basis for Processing

We process personal data under the following legal bases:

• Consent: When you submit a consultation request through our website forms
• Legitimate Interest: To respond to inquiries about our services and maintain client relationship records
• Contractual Necessity: To fulfill service agreements with clients

Data Subject Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right to Access

You may request confirmation of whether we process your personal data and obtain a copy of that data. We will provide this information within one month of your request.

Right to Rectification

If personal information we hold about you is inaccurate or incomplete, you have the right to request correction or completion of that data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent for its processing.

Right to Restrict Processing

You may request that we restrict processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to processing.

Right to Data Portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format.

Right to Object

You may object to processing of your personal data where we rely on legitimate interests as the legal basis for processing.

Data Retention

We retain personal data for the following periods:

• Consultation inquiries: 2 years from initial contact
• Active client projects: Duration of project plus 6 years for contractual and tax purposes
• Marketing consent records: Until consent is withdrawn, plus 3 years for compliance documentation

International Data Transfers

We do not transfer personal data outside the United Kingdom. All data processing and storage occurs within UK jurisdiction.

Automated Decision Making

We do not use automated decision making or profiling in our processing of personal data.

Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify you within 72 hours of becoming aware of the breach, as required by UK GDPR.

Exercising Your Rights

To exercise any of your data protection rights, submit a written request to [email protected]. We will respond to your request within one month, though this period may be extended by two additional months where requests are complex or numerous.

You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been violated.

Updates to This Notice

We may update this GDPR compliance notice to reflect changes in our data processing practices or legal requirements. The date at the top of this page indicates when the most recent updates were made.